diff options
| author | alperak <alperyasinak1@gmail.com> | 2024-07-12 11:06:41 +0300 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2024-07-14 12:06:20 -0700 |
| commit | 9f4361418d58941d058fb94a3671b9d0904b6300 (patch) | |
| tree | cf085713fa51d2ad959ee560bfe303861c0c5e9a | |
| parent | 294c0251f83671151c46fe3538e9bad27c0278bd (diff) | |
| download | meta-openembedded-9f4361418d58941d058fb94a3671b9d0904b6300.tar.gz | |
exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fix
Release Notes:
* https://github.com/Exiv2/exiv2/issues/3008
* https://github.com/Exiv2/exiv2/milestone/14?closed=1
This release also fixes a low-severity security issue in asfvideo.cpp:
* [CVE-2024-39695](https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh): out-of-bounds read in AsfVideo::streamProperties.
This vulnerability is in a new feature (ASF video) that was added in version 0.28.0, so earlier versions of Exiv2 are not affected.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
| -rw-r--r-- | meta-oe/recipes-support/exiv2/exiv2_0.28.3.bb (renamed from meta-oe/recipes-support/exiv2/exiv2_0.28.2.bb) | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-oe/recipes-support/exiv2/exiv2_0.28.2.bb b/meta-oe/recipes-support/exiv2/exiv2_0.28.3.bb index faae247998..3e33ab7953 100644 --- a/meta-oe/recipes-support/exiv2/exiv2_0.28.2.bb +++ b/meta-oe/recipes-support/exiv2/exiv2_0.28.3.bb | |||
| @@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=625f055f41728f84a8d7938acc35bdc2" | |||
| 5 | DEPENDS = "zlib expat brotli libinih" | 5 | DEPENDS = "zlib expat brotli libinih" |
| 6 | 6 | ||
| 7 | SRC_URI = "git://github.com/Exiv2/exiv2.git;protocol=https;branch=0.28.x" | 7 | SRC_URI = "git://github.com/Exiv2/exiv2.git;protocol=https;branch=0.28.x" |
| 8 | SRCREV = "04207b9c39bf7b3b1a7144f7ed4e4f16b4f29ef6" | 8 | SRCREV = "a6a79ef064f131ffd03c110acce2d3edb84ffa2e" |
| 9 | S = "${WORKDIR}/git" | 9 | S = "${WORKDIR}/git" |
| 10 | 10 | ||
| 11 | inherit cmake gettext | 11 | inherit cmake gettext |